Monitoring and Troubleshooting Softwires
Ping and Traceroute for DS-Lite
With Junos OS Release 11.4, you can use the ping and traceroute commands to determine the status of the DS-Lite
softwire tunnels:
IPv6 ping—The softwire address endpoint on the DS-Lite softwire terminator (AFTR) is usually configured only at the
[edit services softwire]hierarchy level; it need not be hosted on any interface. Previous releases of the Junos OS software did not provide replies to pings to the IPv6 softwire address when the AFTR was not configured on a specific interface or loopback. An IPv6 ping enables the softwire initiator (B4) to verify the softwire address of the AFTR before creating a tunnel.IPv4 ping—A special IPv4 address, 192.0.0.1, is reserved for the AFTR. Previous releases of the Junos OS did not respond to any pings sent to this address. A B4 and other IPv4 nodes can now ping to this address to determine whether the DS-Lite tunnel is working.
Traceroute—The AFTR now generates and forwards traceroute packets over the DS-Lite tunnel.
No additional CLI configuration is necessary to use the new functionality.
Monitoring Softwire Statistics
Purpose
You can review softwire global statistics by using
the show services softwire or show services softwire
statistics command.
Action
user@host# show services softwire Interface: sp-0/0/0, Service set: sset Softwire Direction Flow count 2001:0:0:1::1 -> 1001::1 I 3
user@host# show services softwire statistics DS-Lite Statistics: Service PIC Name: :sp-0/0/0 Statistics ---------- Softwires Created :2 Softwires Deleted :1 Softwires Flows Created :2 Softwires Flows Deleted :1 Slow Path Packets Processed :2 Fast Path Packets Processed :274240 Fast Path Packets Encapsulated :583337 Rule Match Failed :0 Rule Match Succeeded :2 IPv6 Packets Fragmented :0 Transient Errors ---------------- Flow Creation Failed - Retry :0 Slow Path Failed - Retry :0 Errors ------ Softwire Creation Failed :0 Flow Creation Failed :0 Slow Path Failed :0 Packet not IPv4-in-IPv6 :0 IPv6 Fragmentation Error :0 Slow Path Failed - IPv6 Next Header Offset :0 Decapsulated Packet not IPv4 :0 Fast Path Failed - IPv6 Next Header Offset :0 No Softwire ID :0 No Flow Extension :0 Flow Limit Exceeded :0 6rd Statistics: Service PIC Name :sp-0/0/0 Statistics ---------- Softwires Created :0 Softwires Deleted :0 Softwires Flows Created :0 Softwires Flows Deleted :0 Slow Path Packets Processed :0 Fast Path Packets Processed :0 Fast Path Packets Encapsulated :0 Rule Match Failed :0 Rule Match Succeeded :0 Transient Errors ---------------- Flow Creation Failed - Retry :0 Slow Path Failed - Retry :0 Errors ------ Softwire Creation Failed :0 Flow Creation Failed :0 Slow Path Failed :0 Packet not IPv6-in-IPv4 :0 Slow Path Failed - IPv6 Next Header Offset :0 Decapsulated Packet not IPv6 :0 Encapsulation Failed - No packet memory :0 No Softwire ID :0 No Flow Extension :0 ICMPv4 Dropped Packets :0
Monitoring CGN, Stateful Firewall, and Softwire Flows
Purpose
Use the following commands to check the creation of the softwires, pre-NAT flows, and post-NAT flows. Output can be filtered using more specific fields such as AFTR or B4 address or both for DS-Lite, and softwire-concentrator or softwire-initiator or both for 6rd.
show services stateful-firewall flows
show services softwire flows
Action
user@host# show services stateful-firewall flows
Interface: sp-0/1/0, Service set: dslite-svc-set2
Flow State Dir Frm count
TCP 200.200.200.2:80 -> 44.44.44.1:1025 Forward O 219942
NAT dest 44.44.44.1:1025 -> 20.20.1.4:1025
Softwire 2001::2 -> 1001::1
TCP 20.20.1.2:1025 -> 200.200.200.2:80 Forward I 110244
NAT source 20.20.1.2:1025 -> 44.44.44.1:1024
Softwire 2001::2 -> 1001::1
TCP 200.200.200.2:80 -> 44.44.44.1:1024 Forward O 219140
NAT dest 44.44.44.1:1024 -> 20.20.1.2:1025
Softwire 2001::2 -> 1001::1
DS-LITE 2001::2 -> 1001::1 Forward I 988729
TCP 200.200.200.2:80 -> 44.44.44.1:1026 Forward O 218906
NAT dest 44.44.44.1:1026 -> 20.20.1.3:1025
Softwire 2001::2 -> 1001::1
TCP 20.20.1.3:1025 -> 200.200.200.2:80 Forward I 110303
NAT source 20.20.1.3:1025 -> 44.44.44.1:1026
Softwire 2001::2 -> 1001::1
TCP 20.20.1.4:1025 -> 200.200.200.2:80 Forward I 110944
NAT source 20.20.1.4:1025 -> 44.44.44.1:1025
Softwire 2001::2 -> 1001::1